CVE-2026-116747 Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMYSECRET fallback key. When KENERSECRETKEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to...

CVE-2026-116747 Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMYSECRET fallback key. When KENERSECRETKEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to...

CVE-2026-116747

Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMYSECRET fallback key. When KENERSECRETKEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to...

CVE-2026-116747

Kener versions 3.0.0 before 4.1.10 are vulnerable to an authentication bypass due to the use of a hardcoded fallback key (DUMMY_SECRET ). If the KENER_SECRET_KEY environment variable is empty or unset, an unauthenticated attacker who knows an administrator's email can sign a kener-user cookie. Th...

CVE-2026-86958

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code...

CVE-2026-84493

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

CVE-2026-112430

An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

Missing Authentication For Critical Function

Apache ActiveMQ Artemis is vulnerable to Missing Authentication for Critical Function. The vulnerability is due to improper protection of cluster administrative credentials during the initial cluster connection handshake, which allows an unauthenticated network-adjacent attacker to exploit the...

CVE-2026-84493

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent...

EUVD-2026-110401

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent...

CVE-2026-84493

This vulnerability involves an authentication issue in iOS and iPadOS caused by improper state management. A malicious application could potentially access Bluetooth functionality without obtaining explicit user consent. The issue has been addressed in versions iOS 26.7.2 , iPadOS 26.7.2 , iOS 27...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

CVE-2026-112427

An authentication issue in macOS Golden Gate was identified, which could allow a remote attacker to achieve arbitrary code execution . The vulnerability stems from improper state management. The issue is addressed in macOS Golden Gate 27.2 . No specific exploit information or in-the-wild exploita...

EUVD-2026-110154

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code...

CVE-2026-86958

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code...

CVE-2026-86958

This vulnerability affects macOS systems and involves an issue addressed through improved memory handling . An attacker possessing memory write capability may be able to bypass pointer authentication codes and execute arbitrary code . The issue is resolved in macOS Golden Gate 27 , macOS Sequoia ...

CVE-2026-112430

An authentication issue exists in macOS affecting versions prior to Golden Gate 27.2 , Sequoia 15.8.2 , and Tahoe 26.7.2 . The root cause is a lack of proper validation of user attributes , which could allow an application to gain root privileges . Remediation is available through the specified u...